This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File:                     2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier:          M4f/SECOumnuIcBq+Of6X8svHTCcCYcyNjHnzoZ9xcg=
Subject key identifier:   0F:58:5B:AD:C8:74:E9:58:F1:D5:4E:8D:9E:4C:AB:5A:F1:60:1E:BA
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer:       /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial:       019C0E593C141CEC33F0DA8AA38C4851C94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number:          17F7
Signing time:             Fri 30 Jan 2026 10:00:54 +0000
Manifest this update:     Fri 30 Jan 2026 10:00:54 +0000
Manifest next update:     Sat 31 Jan 2026 10:00:54 +0000
Files and hashes:         1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: ZMg+9uBjE4wDNDJQDE1E38Nbc+CVDnGvcd9MqST69z8=)
                          2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
                          3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:59:3c:14:1c:ec:33:f0:da:8a:a3:8c:48:51:c9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
        Validity
            Not Before: Jan 30 10:00:54 2026 GMT
            Not After : Jan 31 10:00:54 2026 GMT
        Subject: CN=0f585badc874e958f1d54e8d9e4cab5af1601eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:89:95:0f:49:07:49:36:9a:74:1a:64:9d:
                    9c:35:08:65:d2:f2:e1:64:bc:b7:36:1d:6e:79:25:
                    e7:5c:52:11:77:6d:7d:f3:c9:c3:af:8b:01:67:1e:
                    dd:1e:d9:da:d6:45:91:73:71:4c:10:2b:ef:2e:bc:
                    6c:68:27:b4:ea:16:da:d7:c1:ba:07:0a:b3:19:e0:
                    5f:50:80:ca:f7:78:41:7d:3b:88:81:50:cb:ca:96:
                    af:8d:b0:c5:e2:2e:5b:cc:ed:9b:b6:fe:2f:21:52:
                    fb:57:20:29:d1:aa:3e:a2:9a:af:36:d2:6a:68:98:
                    de:77:0b:de:9a:51:49:35:d4:75:0d:b2:e6:69:f5:
                    16:a6:9b:39:1a:bb:6b:23:f8:f6:71:9e:84:d6:ba:
                    2c:20:32:78:c7:19:b5:15:3b:f3:ae:8a:1f:f7:af:
                    9f:d0:ac:75:b1:e2:20:bb:ac:4a:2a:98:04:e9:bb:
                    c3:2e:a9:34:66:38:7c:c4:4f:39:df:aa:68:07:82:
                    20:2d:19:f7:8b:e8:5b:3f:13:a9:fa:33:09:09:e2:
                    8d:3a:fd:3c:f7:52:03:cc:6b:77:ad:80:5d:97:5f:
                    45:41:82:ce:7c:90:ef:36:40:36:21:9f:fb:6e:f7:
                    4c:ac:de:c2:ad:6a:aa:a1:5f:6c:5f:bb:c4:0c:2d:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:5B:AD:C8:74:E9:58:F1:D5:4E:8D:9E:4C:AB:5A:F1:60:1E:BA
            X509v3 Authority Key Identifier:
                keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cf:69:55:67:3f:1c:da:fe:e7:c4:10:99:db:2e:5f:c6:41:
         f8:dd:11:e8:d7:a6:d4:32:ad:69:1b:2d:6b:d4:92:e0:c1:d7:
         4a:31:e4:85:d9:30:ac:98:46:1f:2c:b6:2d:db:81:77:f5:cb:
         aa:4d:8a:84:8a:69:df:7f:11:06:62:1e:64:f6:1e:77:6f:d5:
         20:28:3b:46:d5:dd:77:d1:91:36:33:01:92:67:dc:1d:b9:2c:
         53:db:1c:24:95:6e:c6:92:c5:83:33:2e:18:db:16:12:3c:05:
         2f:93:b7:c6:69:7c:a3:4f:41:2b:12:ea:04:da:0d:44:c0:81:
         81:3a:f1:a9:80:b6:38:d7:51:1b:9e:c0:63:39:e0:0c:e1:9e:
         26:41:00:7a:57:59:cf:3d:9d:4c:b0:e0:ba:3a:77:15:83:55:
         44:55:da:01:4c:14:94:0a:07:84:bb:4d:39:7a:9f:cd:41:5e:
         fa:ee:4c:85:e5:55:53:92:17:12:20:be:58:43:42:3b:1c:ad:
         63:a3:9e:78:38:8e:33:8f:7f:14:f9:d8:47:ba:e2:18:28:9c:
         33:be:f4:fa:a4:db:17:51:1b:da:8c:3e:48:de:74:67:e3:c6:
         76:ad:fc:a4:f9:81:43:a0:69:7d:b5:03:b3:95:99:34:02:b3:
         e1:b3:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:31:47 2026 by rpki-client